I
I
Ivan Nikolaevich2019-02-08 20:04:40
symfony
Ivan Nikolaevich, 2019-02-08 20:04:40

Security monitor existence in Symfony/Laravel?

Colleagues, in many TK on the Russian market, approximately the following wording with copy-paste is provided:


- prevention of unauthorized access to information and (or) its transfer to persons who do not have the right to access information;
- application of mechanisms for detecting attempts to intrude on the site and gain unauthorized access;
- recognition of the types of all known attacks by their signatures and storing them in a separate database on the server;
- determining the degree of importance of the attack signature and setting alerts or blocking activity depending on this indicator;
- recognition of the similarity of unauthorized activity by analyzing the user parameters in the packet, the similarity of activity should be recorded as a percentage even if the attacker changes the IP address and header of the HTTP packet;
- notification of the site administrator about attempts to intrude on the site;
- providing an opportunity for the site administrator to block unauthorized user activity on the site.

Everything is clear in Bitrix, they have a module for this in the core with a query analyzer and all that.
Tell me, do you have similar packages for symfony / laravel or not tied to them, which could be installed via composer?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
B
Barmunk, 2019-02-11
@Barmunk

You can log each user request (request) into a table. Make a one-to-many connection to it, with all qeury requests of this request. Tie all this to a specific user_id and, based on all the information received, make a security middleware, as far as your imagination is enough.

B
BoShurik, 2019-02-10
@BoShurik

Looks like a web application firewall
https://modsecurity.org/
I highly doubt such a product exists as a library

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question